The .dev TLS is on the HSTS preload list, so there's no need to set this header here at all. Change-Id: I253fa2427e75bd0808945cd5d53159cac74e7f8b Reviewed-on: https://cl.tvl.fyi/c/depot/+/11018 Autosubmit: flokli <flokli@flokli.de> Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
		
			
				
	
	
		
			46 lines
		
	
	
	
		
			1,006 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
	
		
			1,006 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
| { depot, ... }:
 | |
| 
 | |
| {
 | |
|   imports = [
 | |
|     ./base.nix
 | |
|   ];
 | |
| 
 | |
|   config = {
 | |
|     services.nginx.virtualHosts."tvix.dev" = {
 | |
|       serverName = "tvix.dev";
 | |
|       enableACME = true;
 | |
|       forceSSL = true;
 | |
|       root = depot.tvix.website;
 | |
|     };
 | |
| 
 | |
|     services.nginx.virtualHosts."bolt.tvix.dev" = {
 | |
|       root = depot.web.tvixbolt;
 | |
|       enableACME = true;
 | |
|       forceSSL = true;
 | |
|     };
 | |
| 
 | |
|     # old domain, serve redirect
 | |
|     services.nginx.virtualHosts."tvixbolt.tvl.su" = {
 | |
|       enableACME = true;
 | |
|       forceSSL = true;
 | |
|       extraConfig = "return 301 https://bolt.tvix.dev$request_uri;";
 | |
|     };
 | |
| 
 | |
|     services.nginx.virtualHosts."docs.tvix.dev" = {
 | |
|       serverName = "docs.tvix.dev";
 | |
|       enableACME = true;
 | |
|       forceSSL = true;
 | |
| 
 | |
|       extraConfig = ''
 | |
|         location = / {
 | |
|           # until we have a better default page here
 | |
|           return 301 https://docs.tvix.dev/rust/tvix_eval/index.html;
 | |
|         }
 | |
| 
 | |
|         location /rust/ {
 | |
|           alias ${depot.tvix.rust-docs}/;
 | |
|         }
 | |
|       '';
 | |
|     };
 | |
|   };
 | |
| }
 |